Data Brokerage

Overview

Companies and government agencies do not just directly collect data on US citizens and consumers. The data brokerage ecosystem is a vast but understudied form of indirect surveillance: numerous companies both foreign and domestic buy, sell, aggregate, license, and otherwise share sensitive information on American subjects as part of this international, multi-billion-dollar industry. Clients range from advertising firms and insurance providers to US law enforcement agencies and a range of foreign actors, and, as a result, the data brokerage ecosystem has implications for privacy, civil rights, national security, and democracy itself. The Data Brokerage Project, part of Duke’s Privacy & Democracy Project, conducts quantitative and qualitative research on this industry and its effects, producing research and actionable insights for policymakers and the general public.

Media Coverage

Data brokers resist pressure to stop collecting info on pregnant people,” Politico, August 1, 2022.

These Companies Know When You’re Pregnant—And They’re Not Keeping It Secret,” Gizmodo, July 30, 2022.

Federal privacy legislation progresses, but concerns about data brokers loom,” CyberScoop, July 20, 2022.

The Surveillance Threat After Roe Is Worse Than You Think,” Washington Monthly, July 15, 2022.

“Morning Tech,” Politico, July 11, 2022.

Lobbying heats up to protect evidence in potential abortion cases,” Politico, July 8, 2022.

Google Allowed a Sanctioned Russian Ad Company to Harvest User Data for Months,” ProPublica, July 1, 2022.

After Roe’s fall, the Pentagon has no answers for female service members,” Politico, June 24, 2022.

Lawmakers want to restrict user data sales to nations like China, Russia,” CyberScoop, June 23, 2022.

What is Meta Pixel, the code detected on health system websites in NC and beyond?The Charlotte Observer, June 20, 2022.

‘Lock it down right now’: Abortion rights advocates prepare for a new wave of digital security threats,” Politico, June 17, 2022.

Ban on sale of health data by brokers introduced in Senate ahead of abortion ruling,” SC Magazine, June 17, 2022.

Democrats want to block tech companies from handing data to anti-abortion activists and law enforcement,” The Independent, June 16, 2022.

Last Week Tonight takes on data brokers, with Duke’s Justin Sherman,” Debugger (podcast), May 25, 2022.

The third-party brokers who make millions selling your data to political groups,” Open Secrets, April 21, 2022.

Brokers’ sales of U.S. military personnel data overseas stir national security fears,” CyberScoop, April 20, 2022.

Who Is Policing the Location Data Industry?The Markup, February 24, 2022.

Oracle’s pending purchase of Cerner raises privacy concerns,” Health Data Management, February 23, 2022.

Life360 Says It Will Stop Selling Precise Location Data,” The Markup, January 28, 2022.

Morning Brew,” Morning Brew, December 22, 2021.

Senators scrutinize shady third-party data brokers,” Roll Call, December 14, 2021.

Latest Senate hearing casts wide net on US data brokerage,” International Association of Privacy Professionals, December 9, 2021.

Warren, Racine Target Amazon’s ‘Inflated’ Prices,” Communications Daily, December 8, 2021.

D.C. attorney general takes antitrust case against Amazon to the U.S. Senate,” Washington Business Journal, December 7, 2021.

Amazon Takes Most Heat As Senate Scrutinizes Tech Sector,” Law360, December 7, 2021.

Senators turn up the heat on Amazon, data brokers during hearing,” The Hill, December 7, 2021.

Witnesses Urge Congress to Act on Data Brokers,” Vital Law, December 7, 2021.

Senate Finance to scrutinize Amazon, data brokers,” Politico, December 7, 2021.

The Popular Family Safety App Life360 Is Selling Precise Location Data on Its Tens of Millions of Users,” The Markup, December 6, 2021.

For Sale: Your Personal Information,” Policy 360 (podcast), September 22, 2021.

Notes from the Electronic Cottage: Data Brokers,” WERU (radio), September 16, 2021.

The Lawfare Podcast: Data Brokers and National Security,” Lawfare (podcast), September 1, 2021.

POLITICO Digital Bridge: Trade and Tech Council details—Data flows peril—Gig workers rejoice,” Politico Europe, August 26, 2021.

House E&C leaders fret over Senate broadband plan,” Politico, August 24, 2021.

Report: Data brokers advertise US military personnel data,” International Association of Privacy Professionals, August 23, 2021.

Wyden urges ban on sale of Americans’ personal data to ‘unfriendly’ foreign governments,” The Washington Post, April 15, 2021.

HBO Feature

“Data Brokers: Last Week Tonight with John Oliver,” HBO, April 10, 2022. Featured research and work by Justin Sherman.

Policy Impact

Blog Posts

Publications

"Response from Duke University’s Data Brokerage Research Project - Federal Trade Commission (FTC) Rule on Commercial Surveillance and Data Security", October, 2022, https://techpolicy.sanford.duke.edu/wp-content/uploads/sites/4/2022/10/Response-to-FTC-RFC-Duke-Data-Brokerage-2022.pdf

Justin Sherman, “The FTC May (Finally) Protect Americans From Data Brokers,” WIRED, August 31, 2022, https://www.wired.com/story/the-ftc-may-finally-protect-americans-from-data-brokers/

Justin Sherman, “Examining data broker Equifax’s relationships with millions of employers,” Duke University Sanford School of Public Policy, August 29, 2022, https://techpolicy.sanford.duke.edu/blogroll/examining-data-broker-equifaxs-relationships-with-millions-of-employers/

Alistair Simmons and Justin Sherman, “Data Brokers, Elder Fraud, and Justice Department Investigations,” Lawfare, July 25, 2022, https://www.lawfareblog.com/data-brokers-elder-fraud-and-justice-department-investigations

Justin Sherman, “The U.S. Needs Controls on Data Brokerage,” Tech Policy Press, June 24, 2022, https://techpolicy.press/the-u-s-needs-controls-on-data-brokerage/

Justin Sherman, “Your Health Data Might Be for Sale,” Slate Magazine, June 22, 2022, https://slate.com/technology/2022/06/health-data-brokers-privacy.html

Justin Sherman, “Examining State Bills on Data Brokers,” Lawfare, May 31, 2022, https://www.lawfareblog.com/examining-state-bills-data-brokers

Justin Sherman, “Delaware must regulate the shady data broker industry,” Delaware Online, March 27, 2022, https://www.delawareonline.com/story/opinion/2022/03/27/delaware-must-regulate-shady-data-broker-industry/7168593001/

Justin Sherman, “The Open Data Market and Risks to National Security,” Lawfare, February 3, 2022, https://www.lawfareblog.com/open-data-market-and-risks-national-security

Justin Sherman, “Data broker Oracle just acquired millions’ sensitive health data,” Duke University Sanford School of Public Policy, January 14, 2022, https://centers-dewitt.sanford.duke.edu/techpolicy/blog-data-broker-oracle-just-acquired-millions-sensitive-health-data/

Justin Sherman, “Data Brokers Know Where You Are—and Want to Sell That Intel,” WIRED, August 23, 2021, https://www.wired.com/story/opinion-data-brokers-know-where-you-are-and-want-to-sell-that-intel/

Justin Sherman, “Data Brokers Are Advertising Data on U.S. Military Personnel,” Lawfare, August 23, 2021, https://www.lawfareblog.com/data-brokers-are-advertising-data-us-military-personnel

Justin Sherman, Data Brokers and Sensitive Data on US Individuals (Durham: Duke Sanford School of Public Policy, August 2021), https://centers-dewitt.sanford.duke.edu/techpolicy/report-data-brokers-and-sensitive-data-on-u-s-individuals/

Justin Sherman, “Third-Party Code Tracking and U.S. National Security,” Triangle Privacy Research Hub, August 4, 2021, https://www.triangleprivacyhub.org/access-to-information-the-media-trust-and-duke-university/

Kamran Kara-Pabani and Justin Sherman, “How a Norwegian Government Report Shows the Limits of CFIUS Data Reviews,” Lawfare, May 3, 2021, https://www.lawfareblog.com/how-norwegian-government-report-shows-limits-cfius-data-reviews

Harrison Grant, “The Norwegian Consumer Council’s Work on Large Platforms and Data Transmissions from Mobile Apps,” Triangle Privacy Research Hub, April 28, 2021, http://www.triangleprivacyhub.org/access-to-information-duke-university-and-the-media-trust-april-update/

“Data Brokers Are a Threat to Democracy,” WIRED, April 13, 2021, https://www.wired.com/story/opinion-data-brokers-are-a-threat-to-democracy/

Justin Sherman, “Federal Privacy Rules Must Get ‘Data Broker’ Definitions Right,” Lawfare, April 8, 2021, https://www.lawfareblog.com/federal-privacy-rules-must-get-data-broker-definitions-right